$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3232382e33362e302f32332d3233203d3e2034383038.roa File: 34332e3232382e33362e302f32332d3233203d3e2034383038.roa (raw, json) Hash identifier: Xa5AXQxRxhiNUn0Q383X3+I1dkYG4/UzCR3ox8vQoXk= Subject key identifier: 2F:CE:34:2C:08:97:8B:62:9D:1B:1F:80:FA:EC:22:08:DB:E2:48:5B Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3 Certificate serial: 043F3B0AC546B2341EDFAF0569114B1B9967A1B1 Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3232382e33362e302f32332d3233203d3e2034383038.roa Signing time: Tue 26 May 2026 09:24:01 +0000 ROA not before: Tue 26 May 2026 09:19:01 +0000 ROA not after: Tue 25 May 2027 09:24:01 +0000 asID: 4808 IP address blocks: 43.228.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3f:3b:0a:c5:46:b2:34:1e:df:af:05:69:11:4b:1b:99:67:a1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3 Validity Not Before: May 26 09:19:01 2026 GMT Not After : May 25 09:24:01 2027 GMT Subject: CN=2FCE342C08978B629D1B1F80FAEC2208DBE2485B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:8f:5e:cb:a5:ba:04:4d:d8:96:3e:fe:4a: b1:ab:f4:06:dc:18:9b:5b:02:a0:79:18:21:a0:ba: ce:f8:12:61:4d:15:67:b9:d7:9b:93:e3:43:95:ce: 09:aa:c8:01:6f:a8:92:4c:fd:68:80:52:ca:b3:d6: 98:9a:06:4f:db:1b:d6:2d:6d:c7:fa:20:50:8f:ba: 10:ce:0a:c1:f2:ec:4e:16:55:93:49:60:aa:a2:3e: f3:b2:a9:b1:ec:b1:ae:5c:a0:32:0c:cb:68:05:3f: 79:3e:25:86:61:c7:b9:dc:a1:0f:85:bb:f0:48:d8: 28:03:1e:6b:31:f9:cd:5e:d8:2c:93:fb:a9:0f:9b: 37:99:9c:c0:21:29:b6:51:c5:b8:2a:9f:d0:34:26: 68:16:68:cf:0b:7f:93:5c:df:9a:28:33:d0:25:3e: 76:eb:9e:1c:0d:35:54:6b:f1:45:63:3e:09:84:fe: 26:72:d1:7d:13:e1:df:d1:74:7b:7b:a9:39:a6:57: e1:d5:c9:c4:94:45:64:f0:e2:fa:d4:9f:32:ad:6c: 48:38:42:14:03:84:50:5a:55:f4:81:0f:cb:da:a1: 0a:cc:fa:9a:bc:44:41:fe:ee:95:3a:fc:db:e3:91: 54:f8:50:d8:aa:f9:c7:ca:61:82:58:65:17:b7:79: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CE:34:2C:08:97:8B:62:9D:1B:1F:80:FA:EC:22:08:DB:E2:48:5B X509v3 Authority Key Identifier: keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3232382e33362e302f32332d3233203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.36.0/23 Signature Algorithm: sha256WithRSAEncryption 77:73:d2:fb:c6:4a:76:ac:ac:e6:31:41:f8:36:80:72:84:75: d9:23:f9:57:f0:b5:46:ce:32:80:75:01:4e:2c:21:bd:8f:cb: 6b:69:38:ea:1a:85:fb:c9:2f:af:90:88:ae:ea:23:07:da:c6: 14:63:25:c3:e7:d6:d9:e6:9a:37:72:bc:5e:af:e7:79:38:19: 55:82:57:a0:f5:6d:58:c0:ea:a2:cf:87:9b:94:7e:46:5f:a9: f3:b5:db:3d:f8:25:0e:b3:00:ef:9f:00:28:43:72:1a:8e:96: 11:e4:4f:ba:b1:2d:9f:11:af:14:15:ad:29:f0:e2:8f:5b:c4: 7e:c1:3a:35:e5:9c:01:75:9f:e0:59:1f:e8:94:13:e2:b7:8f: 05:70:ce:a9:44:59:1e:2c:11:92:65:bd:48:fc:ae:d2:f6:06: 8e:62:79:3e:01:83:90:5e:c2:27:73:71:fd:79:25:3f:0d:48: 29:9d:c0:70:d7:17:5f:da:22:e6:0f:a7:ce:a6:7a:f2:d5:92: 18:0d:7f:e6:67:9f:72:a6:be:ef:61:17:fe:19:36:72:82:ba: 14:b5:70:5c:46:d3:be:6f:af:7c:81:3e:4f:49:19:74:a1:23: 93:3e:fd:ad:c5:c8:07:17:60:4b:6b:1a:6c:7d:cc:fc:53:72: 52:84:fa:66 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUBD87CsVGsjQe368FaRFLG5lnobEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEw QkZGNjZCMzAeFw0yNjA1MjYwOTE5MDFaFw0yNzA1MjUwOTI0MDFaMDMxMTAvBgNV BAMTKDJGQ0UzNDJDMDg5NzhCNjI5RDFCMUY4MEZBRUMyMjA4REJFMjQ4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMl49ey6W6BE3Ylj7+SrGr9Abc GJtbAqB5GCGgus74EmFNFWe515uT40OVzgmqyAFvqJJM/WiAUsqz1piaBk/bG9Yt bcf6IFCPuhDOCsHy7E4WVZNJYKqiPvOyqbHssa5coDIMy2gFP3k+JYZhx7ncoQ+F u/BI2CgDHmsx+c1e2CyT+6kPmzeZnMAhKbZRxbgqn9A0JmgWaM8Lf5Nc35ooM9Al PnbrnhwNNVRr8UVjPgmE/iZy0X0T4d/RdHt7qTmmV+HVycSURWTw4vrUnzKtbEg4 QhQDhFBaVfSBD8vaoQrM+pq8REH+7pU6/NvjkVT4UNiq+cfKYYJYZRe3eU/vAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUL840LAiXi2KdGx+A+uwiCNviSFswHwYDVR0j BBgwFoAU1WnOSe2UCVUxj3GK6s1tQQv/ZrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjUwODY3My8wL0Q1NjlDRTQ5RUQ5NDA5NTUzMThGNzE4QUVBQ0Q2 RDQxMEJGRjY2QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEwQkZGNjZCMy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MzMwODU5MDkyNTA4NjczLzAvMzQzMzJlMzIzMjM4 MmUzMzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEr5CQwDQYJKoZIhvcNAQELBQADggEBAHdz0vvGSnasrOYxQfg2gHKEddkj+Vfw tUbOMoB1AU4sIb2Py2tpOOoahfvJL6+QiK7qIwfaxhRjJcPn1tnmmjdyvF6v53k4 GVWCV6D1bVjA6qLPh5uUfkZfqfO12z34JQ6zAO+fAChDchqOlhHkT7qxLZ8RrxQV rSnw4o9bxH7BOjXlnAF1n+BZH+iUE+K3jwVwzqlEWR4sEZJlvUj8rtL2Bo5ieT4B g5Bewidzcf15JT8NSCmdwHDXF1/aIuYPp86mevLVkhgNf+Znn3Kmvu9hF/4ZNnKC uhS1cFxG075vr3yBPk9JGXShI5M+/a3FyAcXYEtrGmx9zPxTclKE+mY= -----END CERTIFICATE-----Generated at Fri May 29 23:49:59 2026 by rpki-client